Epmm (Ivanti) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-08-07. Vendor: Ivanti.
CVEs of Epmm
- CVE-2024-36131 - CVSS 8.8 (high), 2024-08-07: An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbitrary commands on…
- CVE-2024-36132 - CVSS 8.2 (high), 2024-08-07: Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authentication and access sensitive resources.
- CVE-2024-36130 - CVSS 9.8 (critical), 2024-08-07: An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to execute arbitrary…
- CVE-2024-34788 - CVSS 6.5 (medium), 2024-08-07: An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access potentially sensitive information
- CVE-2023-46807 - CVSS 6.7 (medium), 2024-05-22: An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in…
- CVE-2023-46806 - CVSS 6.7 (medium), 2024-05-22: An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify…
- CVE-2024-22026 - CVSS 6.7 (medium), 2024-05-22: A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary…
- CVE-2023-39335 - CVSS 9.8 (critical), 2023-11-15: A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any…
- CVE-2023-39337 - CVSS 9.1 (critical), 2023-11-15: A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and…
- CVE-2023-35082 - CVSS 10 (critical), 2023-08-15: An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the…
- CVE-2023-35081 - CVSS 7.2 (high), 2023-08-03: A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to…
